android-tools: Multiple Vulnerabilities — GLSA 202210-41

Multiple vulnerabilities have been found in android-tools, the worst of which could result in arbitrary code execution.

Affected packages

dev-util/android-tools on all architectures
Affected versions < 33.0.3
Unaffected versions >= 33.0.3

Background

android-tools contains Android platform tools (adb, fastboot, and mkbootimg).

Description

Multiple vulnerabilities have been discovered in android-tools. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All android-tools users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=dev-util/android-tools-33.0.3"
 

References

Release date
October 31, 2022

Latest revision
October 31, 2022: 1

Severity
normal

Exploitable
remote

Bugzilla entries